NetSight
critical9.8

CVE-2020-11182

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Co…

Impact

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommPm3003a Firmware
All versions
QualcommPm4125 Firmware
All versions
QualcommPm456 Firmware
All versions
QualcommPm6125 Firmware
All versions
QualcommPm6150 Firmware
All versions
QualcommPm6150a Firmware
All versions
QualcommPm6150l Firmware
All versions
QualcommPm6250 Firmware
All versions
QualcommPm6350 Firmware
All versions
QualcommPm640a Firmware
All versions
QualcommPm640l Firmware
All versions

Weakness classification

References